Modular Verification of Interrupt-Driven Software
This work addresses the problem of verifying safety-critical interrupt-driven software for developers and engineers, offering an incremental improvement over existing non-modular verification techniques.
The authors tackled the difficulty of verifying interrupt-driven software by proposing a modular abstract interpretation framework that avoids constructing monolithic models, and demonstrated its effectiveness by analyzing 35 applications with 22,541 lines of code, showing faster and more accurate results.
Interrupts have been widely used in safety-critical computer systems to handle outside stimuli and interact with the hardware, but reasoning about interrupt-driven software remains a difficult task. Although a number of static verification techniques have been proposed for interrupt-driven software, they often rely on constructing a monolithic verification model. Furthermore, they do not precisely capture the complete execution semantics of interrupts such as nested invocations of interrupt handlers. To overcome these limitations, we propose an abstract interpretation framework for static verification of interrupt-driven software that first analyzes each interrupt handler in isolation as if it were a sequential program, and then propagates the result to other interrupt handlers. This iterative process continues until results from all interrupt handlers reach a fixed point. Since our method never constructs the global model, it avoids the up-front blowup in model construction that hampers existing, non-modular, verification techniques. We have evaluated our method on 35 interrupt-driven applications with a total of 22,541 lines of code. Our results show the method is able to quickly and more accurately analyze the behavior of interrupts.